GitHub Advisoryadvisory · npm

GHSA-p2fh-2h23-6grg antfu/utils vulnerable to prototype pollution

MEDIUM Published 2023-05-30 Modified 2023-06-02 Official page ↗

Aliases: CVE-2023-2972
Ecosystem: npm
Packages: @antfu/utils
Severity: Moderate
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weaknesses: CWE-1321
Reviewed: 2023-06-02

Affected packages

• npm @antfu/utils: < 0.7.3 → fixed in 0.7.3

Description

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.

Related

Alias · CVE (1)

CVE-2023-2972 Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3. vulnerability

Weakness · CWE (1)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References